VULNERABILITY INTELLIGENCE

CVE-2008-0001

CVSS score3.6 LOW
EPSS probability0.39%
CISA KEVNot currently listed
Published2008-01-15
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:P

Description

VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the flag variable instead of the acc_mode variable, which might allow local users to bypass intended permissions and remove directories.

Primary references